$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3.cer File: 304836f0-c519-45e1-9cf2-97e7a7c0baa3.cer (raw, json) Hash identifier: wJn5EIneoHglcl3MQplogQ1mrqn5YpTG6S/I3jLMR1I= Subject key identifier: 41:64:1A:9B:CC:D8:C6:F1:8F:DF:56:59:6D:E7:8F:9B:98:9E:D4:9B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8C568FB6C57DCCAFA8A63400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 04:55:17 +0000 Certificate not after: Thu 20 Jan 2028 05:55:17 +0000 Subordinate resources: AS: 46664 IP: 23.146.240.0/22 IP: 2607:8f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:56:8f:b6:c5:7d:cc:af:a8:a6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 04:55:17 2025 GMT Not After : Jan 20 05:55:17 2028 GMT Subject: CN=304836f0-c519-45e1-9cf2-97e7a7c0baa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:9e:ce:d9:5e:3a:66:de:f3:bd:7e:f6:2f: 93:2f:ce:4c:00:c7:b9:f9:9c:72:41:2a:ae:9b:58: e9:b1:c0:ed:a0:61:17:d0:f8:d4:6b:47:87:e3:f1: 86:53:53:57:ea:32:03:a1:5d:18:e5:94:f4:09:3c: 25:7a:6c:3b:3d:9f:e5:5e:47:67:8b:ce:38:28:fe: 7c:e8:44:a0:68:58:30:21:bd:d6:89:98:c9:38:a8: 32:75:2d:7d:61:0d:dd:c3:80:7d:e6:fc:e2:ed:84: 14:04:9c:e3:34:79:a3:f6:c0:c8:b1:1e:28:b2:5f: ae:ab:5b:9c:05:31:7b:33:09:60:38:50:e2:34:d9: 7a:b1:72:67:a5:bf:ea:13:ed:3f:a7:79:d1:be:db: c6:85:e5:a9:3c:05:9e:b4:e0:86:67:92:3e:2a:96: 50:af:d5:ee:7a:3c:ee:bb:31:f8:f6:0a:c6:d0:ec: fa:22:c4:d4:71:8b:48:e7:3c:6e:84:71:9f:50:98: c0:2c:19:5e:8e:46:7d:90:48:a4:8d:22:bb:25:73: 77:79:d4:73:ec:b5:8f:3d:dc:fd:dd:15:49:8a:f3: ee:40:28:a7:23:56:5b:67:d9:e3:f1:f0:1d:b6:4a: 1d:ab:04:cf:74:6f:d1:09:4a:f7:47:35:60:8d:af: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:1A:9B:CC:D8:C6:F1:8F:DF:56:59:6D:E7:8F:9B:98:9E:D4:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.240.0/22 IPv6: 2607:8f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46664 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2d:46:f3:de:2a:7c:e0:8c:c3:a9:f8:64:da:20:0e:22:59: e8:f3:7b:0e:32:89:a2:27:6b:2b:3d:0d:94:72:3f:73:d2:41: d4:cb:c8:4b:7c:33:c2:71:4d:e5:4b:c7:68:81:22:49:a7:65: 5f:c2:4b:c6:8b:76:9d:ea:bb:81:ef:35:4a:0e:4b:e4:48:95: 6c:91:c1:5c:e7:b4:12:31:ae:ed:1b:e5:d4:7d:99:20:b2:f2: 90:1e:43:31:90:97:b9:90:76:13:87:c5:b0:64:40:12:95:ec: 7f:b7:3a:67:33:99:45:71:bb:61:90:04:33:38:a7:19:98:39: 2d:0b:73:89:83:25:ea:fb:2b:2f:5f:b5:37:ed:11:91:04:1a: 06:ca:4d:82:dc:e7:cb:08:7b:d0:32:2f:ea:00:05:3a:22:b6: eb:d8:cb:dc:2c:70:c5:61:6d:6b:e8:5b:b2:b2:14:c8:5d:db: b3:29:94:a1:63:f3:89:90:ba:e6:17:73:5e:c4:1c:26:72:42: 8c:58:4c:d5:9b:b0:30:9b:54:bc:74:e4:16:f7:94:2b:6c:15: 02:9f:21:2c:ac:23:e9:63:08:c4:34:23:a4:8a:06:33:42:b2: eb:af:2c:61:60:a2:94:3e:ec:06:b8:af:23:b0:b9:b2:97:8e: ae:64:c4:9e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuMVo+2xX3Mr6imNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzA0NTUxN1oXDTI4MDEyMDA1NTUxN1owLzEtMCsGA1UEAxMk MzA0ODM2ZjAtYzUxOS00NWUxLTljZjItOTdlN2E3YzBiYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVieztleOmbe871+9i+TL85MAMe5+ZxyQSqu m1jpscDtoGEX0PjUa0eH4/GGU1NX6jIDoV0Y5ZT0CTwlemw7PZ/lXkdni844KP58 6ESgaFgwIb3WiZjJOKgydS19YQ3dw4B95vzi7YQUBJzjNHmj9sDIsR4osl+uq1uc BTF7MwlgOFDiNNl6sXJnpb/qE+0/p3nRvtvGheWpPAWetOCGZ5I+KpZQr9Xuejzu uzH49grG0Oz6IsTUcYtI5zxuhHGfUJjALBlejkZ9kEikjSK7JXN3edRz7LWPPdz9 3RVJivPuQCinI1ZbZ9nj8fAdtkodqwTPdG/RCUr3RzVgja9iBQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEFkGpvM2Mbxj99WWW3nj5uYntSbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z MDQ4MzZmMC1jNTE5LTQ1ZTEtOWNmMi05N2U3YTdjMGJhYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzMwNDgzNmYwLWM1MTktNDVlMS05 Y2YyLTk3ZTdhN2MwYmFhMy8zMDQ4MzZmMC1jNTE5LTQ1ZTEtOWNmMi05N2U3YTdj MGJhYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAIXkvAwDQQCAAIwBwMFACYHjwAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALZIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD0tRvPeKnzgjMOp+GTaIA4iWejz ew4yiaInays9DZRyP3PSQdTLyEt8M8JxTeVLx2iBIkmnZV/CS8aLdp3qu4HvNUoO S+RIlWyRwVzntBIxru0b5dR9mSCy8pAeQzGQl7mQdhOHxbBkQBKV7H+3OmczmUVx u2GQBDM4pxmYOS0Lc4mDJer7Ky9ftTftEZEEGgbKTYLc58sIe9AyL+oABToituvY y9wscMVhbWvoW7KyFMhd27MplKFj84mQuuYXc17EHCZyQoxYTNWbsDCbVLx05Bb3 lCtsFQKfISysI+ljCMQ0I6SKBjNCsuuvLGFgopQ+7Aa4ryOwubKXjq5kxJ4= -----END CERTIFICATE-----Generated at Sat Nov 8 01:32:33 2025 by rpki-client